Beveiligingsadvies

CVE-2026-25628

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-06 20:44:13

Laatst bijgewerkt 2026-02-06 21:11:27

Toegewezen door GitHub_M

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path. Minimal privileges are required (read-only access). This vulnerability is fixed in 1.16.0.

← Alle CVE's bekijken Bekijk op cve.org ↗